Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: Tedoegq2zN7DWPWmM12CUdE+WL5tnfziYM8jhZVGs5A=
Subject key identifier: E5:1F:DB:E2:1B:BA:D6:CD:60:A1:04:3A:C7:0B:BA:33:77:CB:09:68
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 019875D0DAD86044D19FAABFB82670E9FC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 11CD
Signing time: Mon 04 Aug 2025 16:01:18 +0000
Manifest this update: Mon 04 Aug 2025 16:01:18 +0000
Manifest next update: Tue 05 Aug 2025 16:01:18 +0000
Files and hashes: 1: 1-9PbJd606SAcljFaDXOqMtimHsk.roa (hash: KXw8kntxbx0A19gUTumtpNuhW4BHiQmmsQFSl5B6ZYs=)
2: 2-vgpJwDsEY_VoNu8cnFA12khB8.roa (hash: iUnRP/l7HzWTkjMJX+R7OEZ9+tX6NbtdM3UPohuBzqw=)
3: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (hash: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=)
4: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (hash: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=)
5: TvcD9AMtT0yWtHonps0hocI3dlg.roa (hash: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=)
6: nSrKwFeL2JWJX-O6yRsJjMyenO4.roa (hash: T5rsVBpHF0FkBvtcb+csX6yuqxHhug7dklzF66IL7J0=)
7: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: gt5vxxcy8B+QZiwH097BM/ePrgb5gPcA0tYWbX03Stk=)
8: vEaBzwoEAwzosXDFzJLUwLp5Y64.roa (hash: P0SFRAVbYdQfuoozG6LdZarwkxJX0gGTe/XAuMu2MyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:da:d8:60:44:d1:9f:aa:bf:b8:26:70:e9:fc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Aug 4 16:01:18 2025 GMT
Not After : Aug 5 16:01:18 2025 GMT
Subject: CN=e51fdbe21bbad6cd60a1043ac70bba3377cb0968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:55:ae:a5:2f:dc:c1:62:b6:77:cd:40:d5:
88:66:ab:16:b8:f8:a9:42:90:2e:db:59:a2:02:64:
86:8d:f9:e7:e5:b2:00:38:c9:d8:09:3c:cd:e4:a5:
cf:8c:14:c3:e0:97:ef:21:b9:8f:0d:65:50:0b:bc:
40:88:03:b5:b0:bc:32:ed:54:b0:ba:43:9e:58:48:
5c:a6:f0:da:7b:b8:f0:06:36:ba:82:2f:5c:c2:e7:
51:28:98:6e:21:f8:62:fb:55:32:dc:f0:8b:94:35:
1d:d1:36:f4:ae:ce:46:2a:2a:7b:d5:bc:52:5e:11:
b7:5d:a5:69:1a:21:82:10:3f:dc:62:50:63:7b:1f:
99:06:33:b6:98:8d:77:eb:27:bc:b2:0f:93:b4:39:
79:18:5b:67:ad:b9:9c:83:c6:57:ae:56:47:b1:86:
f8:22:7a:77:d9:85:57:1f:f6:4c:d9:5a:ac:2d:b0:
5b:de:cd:a2:a9:08:cd:c9:66:d4:29:10:6e:eb:69:
fa:27:00:0d:cc:f7:ae:c3:e6:82:96:7f:95:92:d3:
6c:05:e3:93:c6:e5:c7:73:21:8c:e0:1f:2a:cb:f6:
67:95:43:75:5c:33:2a:22:42:e9:66:38:8a:da:19:
45:bd:03:0e:45:d4:02:8a:54:29:c9:b9:60:e6:51:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1F:DB:E2:1B:BA:D6:CD:60:A1:04:3A:C7:0B:BA:33:77:CB:09:68
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ad:f0:ad:93:6d:5f:19:ec:e3:b5:85:52:4e:02:3e:89:a9:
31:00:bb:68:82:44:11:92:21:d1:c8:11:5b:d8:52:9c:2e:38:
f0:a4:6f:d4:45:3e:30:08:10:ca:1a:d3:5e:46:6d:7d:1a:65:
26:49:c4:d6:52:10:44:bf:c4:b1:36:66:b6:00:5a:86:6b:7b:
85:b0:3f:b1:bb:c8:26:5f:fe:7f:c5:46:7d:1b:4d:3a:63:f9:
e8:da:7d:6c:8c:14:16:bd:78:55:53:8b:e4:08:5c:0c:32:54:
85:4b:4d:5f:9a:24:8d:79:a1:b8:e4:2a:e0:e3:ee:d7:9b:04:
df:c2:eb:d9:bc:ca:7f:f5:04:d4:79:3e:ab:24:e6:ee:a5:6e:
e2:cf:b4:3d:c6:6f:e0:a8:3b:ac:a4:fe:af:31:38:a0:98:d1:
63:40:e7:f3:10:e6:a1:fc:fd:00:7b:af:e8:fc:a6:31:31:a3:
3a:d4:2e:6a:4c:da:c8:57:d9:0d:47:7b:9b:fe:3c:32:4f:09:
3e:f5:15:e8:4c:4b:2f:17:fd:cd:f5:61:c0:0e:ab:f1:2e:f9:
89:60:48:4d:e9:c0:99:12:51:09:05:d3:f9:90:5e:10:f7:ff:
bb:ba:4c:01:3c:29:f6:12:60:96:ee:7b:96:7e:87:92:92:37:
91:44:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:08 2025 by rpki-client